ACMMC Level 2 Assessmentis conducted by aC3PAO (Certified Third-Party Assessment Organization)to determine whether theOrganization Seeking Certification (OSC)meets all required110 NIST SP 800-171 controls.
Before submitting the results, theC3PAO must complete a final briefing between the Lead Assessor and the OSCto review findings and clarify any concerns.
A). Pay an assessment submission fee#Incorrect
There is no mandatory submission fee for assessment results.Fees apply to the assessment process, not submission.
B). Complete an internal review of the results#Incorrect
While internal reviews are encouraged, they arenot a required step before submissionin CMMC assessment procedures.
C). Notify the CMMC-AB that submission is forthcoming#Incorrect
TheC3PAO submits results to the CMMC-AB through the CMMC eMASS system, but prior notification isnot a required procedural step.
D). Coordinate a final briefing between the Lead Assessor and the OSC#Correct According toCMMC Assessment Process (CAP) guidelines, theLead Assessor must conduct a final briefing with the OSCbefore submitting the results.
This briefing ensures transparency, provides OSC with insight into the findings, and allows for final clarifications.
CMMC Assessment Process (CAP) v1.0
Requires afinal briefing between the Lead Assessor and the OSC before submitting assessment results.
CMMC-AB and C3PAO Process Requirements
TheLead Assessor must communicate final findings with the OSC before submission to CMMC-AB.
Analysis of the Given Options:Official References Supporting the Correct Answer Conclusion:The correct answer is:
#D. Coordinate a final briefing between the Lead Assessor and the OSC.